CimoSchool logo
Security & Privacy

Privacy Policy

CimoSchool is committed to respecting and protecting your privacy and personal data. This document outlines in detail how we collect, use, store, and safeguard your information when you access our website or authenticate using Google Single Sign-On (SSO).

Last updated: October 7, 2026Version: 1.1Organization: CimoSchool

Google Single Sign-On (SSO) Data Transparency Summary

When you choose to Sign In with Google on CimoSchool, we only access basic profile information authorized by you via the Google OAuth Consent Screen:

Data Accessed

Name, Email, Profile Picture, Google User ID

Purpose

Authentication & Learning Account Management

Data Sharing

Strictly NEVER sold or used for ads

Erasure / Revocation

Delete upon request or revoke in Google Settings

1. Controller & Contact Information

CimoSchool is the data controller responsible for personal information processed through this website and associated educational services.

Email: [email protected]
Hotline: 0854300210
Address: Tòa nhà LaAstoria, 383 Nguyễn Duy Trinh, Phường Bình Trưng, Thành phố Hồ Chí Minh

2. Information We Collect

a. Information from Google Single Sign-On (SSO):

When you authenticate via Google Sign-In, we request standard authorization scopes ('openid', 'profile', 'email'). The information received includes:

  • Display Name: Used to personalize your profile and address you.
  • Email Address: Used as your unique account identifier and for critical course notices.
  • Profile Picture (Avatar URL): Used to render your avatar in your user dashboard.
  • Google User ID: A unique identifier assigned by Google to securely authenticate future sessions.

b. Academic & Consultation Data:

Includes student name, phone number, current grade, interested courses, academic goals, assessment diagnostic results, and mentor progress notes.

c. Technical & Log Data:

IP address, browser type, operating system, language preferences, and essential session cookies necessary for security and fraud prevention.

3. Purpose of Processing

CimoSchool processes collected information strictly for legitimate educational operations and user support:

  • Authenticate user identity and maintain secure login sessions via Google SSO.
  • Create, synchronize, and manage student learning profiles on CimoSchool.
  • Assign dedicated mentors, schedule trial sessions, and monitor weekly progress.
  • Send schedule reminders, assessment results, and relevant academic feedback.
  • Protect system integrity against unauthorized access and security threats.

4. Compliance with Google API Services User Data Policy (Limited Use)

"CimoSchool's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements."

Specifically, we commit to the following:

  • No Selling of Data: CimoSchool NEVER sells, trades, or leases Google user data to any third parties or data brokers.
  • No Advertising: Google user data is NEVER utilized to serve advertisements, construct marketing profiles, or deliver retargeted ads.
  • No Unpermitted AI/ML Training: Personal data from Google is not used to train generalized AI models without explicit user authorization.
  • Human Access Restrictions: Internal human access to user data is strictly limited to resolving technical issues upon explicit user request or fulfilling legal obligations.

Official reference: Google API Services User Data Policy

5. Data Storage & Security

We deploy industry-standard technical safeguards to protect your personal data:

  • In-Transit Encryption: All communication between your browser and our servers is protected with high-grade HTTPS/TLS 1.3 encryption.
  • Secure Infrastructure: Cloud servers hosted on enterprise-grade infrastructure with web application firewalls (WAF) and regular backups.
  • Role-Based Access Control: Strict least-privilege role assignments ensure only authorized personnel access records required for student support.

6. User Rights & Data Deletion Instructions

You maintain full sovereignty over your personal records. CimoSchool provides accessible mechanisms for you to exercise your rights:

Option 1: Request Account & Data Deletion

Send an email to [email protected] with the subject "Data Deletion Request" from your registered email address. We will permanently erase your records within 30 business days.

Option 2: Revoke Google Access Instantly

You can revoke CimoSchool's authorization directly from your Google Account settings at any time:

myaccount.google.com/permissions

7. Cookies & Tracking Technologies

We only deploy essential cookies required to retain locale preferences (Vietnamese/English) and sustain secure authentication sessions. We do not use intrusive third-party retargeting cookies.

8. Policy Updates & Effective Date

This Privacy Policy is effective as of October 2026. We may periodically update this document to accommodate new platform capabilities or legal requirements. Any material changes will be announced on our website.

Please also review: CimoSchool Terms of Service for mutual rights and responsibilities when using our platform.